I’m using spring-cloud-gateway with using webflux reactive programming (netty) mode. I have successed to integrate keycloak with spring security by follow the instruction in 19. OAuth2 WebFlux. But I can not use Policy Enforcers feature in keycloak. How to use Policy Enforcers with webflux?
1 Like
Did you find any solution for that?
1 Like
I believe they are mixing standards. One thing is OAuth 2.0, and as usual, there are many libraries for authorization based on scopes or identity claims.
However, when you move to Keycloak for authorization with UMA (meaning using Keycloak resources, policies, permissions, etc.), that standard hasn’t gained adoption and no one is talking about it in the authorization space. This means there are very few libraries available for its implementation. Furthermore, I recommend double-checking if you really want to use UMA